On Thu, Sep 11, 2014 at 04:38:25PM +0400,
 Peter Andreev <andreev.pe...@gmail.com> wrote 
 a message of 29 lines which said:

> a lot of very weird queries, like the following:
> 
> 16:11:41.450794 IP 217.195.66.253.37426 > 62.76.76.62.53: 42580+ A?
> swfjwvtkhqx.www.feile8888.com. (47)
> 16:11:41.450796 IP 91.209.124.75.50584 > 62.76.76.62.53: 37269+ [1au]
> A? izhsccxedub.www.feile666.com. (57)

Looks like the "random qnames" attack 
<http://www.michael-joost.de/dnsterror.html>

_______________________________________________
dns-operations mailing list
dns-operations@lists.dns-oarc.net
https://lists.dns-oarc.net/mailman/listinfo/dns-operations
dns-jobs mailing list
https://lists.dns-oarc.net/mailman/listinfo/dns-jobs

Reply via email to